$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft File: HsyXilPvK-iOXyatm4q4g3PRl6Y.mft (raw, json) Hash identifier: Fgs5ka9clH3z2uaytz4qAECnGOb9aE31vJZc2MR0ayw= Subject key identifier: EC:F1:0B:34:49:50:E3:88:49:7F:DE:B3:A8:9B:27:5B:BA:CF:C5:A1 Authority key identifier: 1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6 Certificate issuer: /CN=A9149F3E/serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6 Certificate serial: 3472 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft Manifest number: 3472 Signing time: Fri 04 Apr 2025 14:21:54 +0000 Manifest this update: Fri 04 Apr 2025 14:21:53 +0000 Manifest next update: Fri 11 Apr 2025 14:21:53 +0000 Files and hashes: 1: HsyXilPvK-iOXyatm4q4g3PRl6Y.crl (hash: WNpvyUbZ67NgQ3CMe4BvUCHrZWjnPJ60mhxpftDo+zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:21:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13426 (0x3472) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E Validity Not Before: Apr 4 14:21:53 2025 GMT Not After : Apr 11 14:21:53 2025 GMT Subject: CN=67efeb02-a805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:93:69:42:b8:39:22:2f:03:ad:a7:c5:e7:60: ee:55:54:c4:37:0f:06:2c:2c:cb:26:d8:af:f2:bb: 02:8e:03:43:c1:71:f1:75:14:9d:23:a4:1c:70:ae: 53:a0:d5:59:ef:11:dc:da:66:b4:f0:60:90:9e:0e: a6:f2:ea:ec:9e:c8:d5:0d:b7:33:f9:61:b5:3b:1f: cd:fc:f7:5d:44:ee:fa:f4:c0:2a:eb:a1:33:85:1c: bc:36:51:a5:7f:44:04:0a:8f:40:a6:7d:3c:ba:7e: 89:b3:79:cc:b1:db:1b:f1:78:49:74:63:5d:35:41: 13:a5:49:a0:f3:c6:7a:80:6a:c0:b8:bc:47:2e:2e: 55:ce:0c:dc:8a:b5:96:3d:43:84:c1:72:61:39:d1: 7c:be:1c:ac:97:45:d2:03:6f:8c:85:04:25:4d:4c: 99:69:d4:bb:b4:13:62:c8:7a:e7:7f:a7:22:64:72: 7c:1c:d5:07:69:28:b0:2b:13:f8:f3:30:2c:4b:91: 3b:46:56:a8:4a:07:b3:88:75:2f:51:1d:4d:3f:e3: ff:88:51:27:1f:92:e8:d4:9d:08:15:cb:70:2e:2a: d7:19:b6:4c:73:b6:90:c9:f6:e3:36:e2:8a:cb:a2: 9d:6b:fc:36:dd:77:ef:c0:06:d2:b1:b8:e5:f8:9a: 40:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F1:0B:34:49:50:E3:88:49:7F:DE:B3:A8:9B:27:5B:BA:CF:C5:A1 X509v3 Authority Key Identifier: keyid:1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e5:15:98:4d:79:b7:9a:63:76:47:ca:38:3b:59:42:bd:61: 24:4a:54:03:5e:fa:c3:3c:5e:06:df:ad:5d:3a:aa:96:83:de: 39:17:af:5a:d2:6b:d7:ba:0b:de:97:6e:b2:ee:19:bc:23:89: 0d:6d:c6:96:1c:42:14:f3:3c:39:03:6e:fb:fb:d1:e2:93:3a: a4:59:a0:1e:95:ee:01:ba:bc:e2:0b:e7:7c:8c:0f:2a:fd:e9: 4a:17:ea:77:e2:b1:4d:93:b0:66:1e:f6:8e:7a:ca:d2:2a:18: be:06:25:a8:c3:99:2a:05:2e:8e:53:7f:66:bd:ad:24:18:33: 23:b8:9a:2e:e1:96:80:ab:18:db:48:ea:b1:f9:c6:07:ec:a4: 25:00:70:b9:46:6f:15:35:f1:c9:19:e6:0c:ca:e5:92:b4:93: 54:ef:a9:f9:3d:08:43:ec:ed:fa:fa:f5:dd:e2:df:0e:99:bf: 4d:6c:b7:07:88:fb:21:03:f8:28:de:8e:8d:af:89:f1:be:7e: 72:89:ec:0e:53:2e:91:d8:49:7b:91:8c:38:4c:39:79:eb:90: 29:e1:03:7c:69:4c:3d:bf:6b:e3:49:29:b1:37:37:05:da:43: 60:4d:bc:08:f7:27:c0:12:fb:49:d0:0c:e2:e0:37:a7:ec:d2: 4e:4b:1d:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKDFFQ0M5NzhBNTNFRjJCRTg4RTVGMjZBRDlCOEFCODgz NzNEMTk3QTYwHhcNMjUwNDA0MTQyMTUzWhcNMjUwNDExMTQyMTUzWjAYMRYwFAYD VQQDEw02N2VmZWIwMi1hODA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpNpQrg5Ii8DrafF52DuVVTENw8GLCzLJtiv8rsCjgNDwXHxdRSdI6QccK5T oNVZ7xHc2ma08GCQng6m8ursnsjVDbcz+WG1Ox/N/PddRO769MAq66EzhRy8NlGl f0QECo9Apn08un6Js3nMsdsb8XhJdGNdNUETpUmg88Z6gGrAuLxHLi5VzgzcirWW PUOEwXJhOdF8vhysl0XSA2+MhQQlTUyZadS7tBNiyHrnf6ciZHJ8HNUHaSiwKxP4 8zAsS5E7RlaoSgeziHUvUR1NP+P/iFEnH5Lo1J0IFctwLirXGbZMc7aQyfbjNuKK y6Kda/w23XfvwAbSsbjl+JpA9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzxCzRJ UOOISX/es6ibJ1u6z8WhMB8GA1UdIwQYMBaAFB7Ml4pT7yvojl8mrZuKuINz0Zem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9CRkVCMDAwODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9Ic3lYaWxQdkstaU9YeWF0bTRxNGczUFJs NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0hzeVhpbFB2Sy1pT1h5YXRtNHE0ZzNQUmw2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS9CRkVCMDAwODFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9Ic3lYaWxQdkst aU9YeWF0bTRxNGczUFJsNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA65RWYTXm3mmN2R8o4O1lCvWEkSlQDXvrDPF4G361dOqqWg945F69a 0mvXugvel26y7hm8I4kNbcaWHEIU8zw5A277+9HikzqkWaAele4BurziC+d8jA8q /elKF+p34rFNk7BmHvaOesrSKhi+BiWow5kqBS6OU39mva0kGDMjuJou4ZaAqxjb SOqx+cYH7KQlAHC5Rm8VNfHJGeYMyuWStJNU76n5PQhD7O36+vXd4t8Omb9NbLcH iPshA/go3o6Nr4nxvn5yiewOUy6R2El7kYw4TDl565Ap4QN8aUw9v2vjSSmxNzcF 2kNgTbwI9yfAEvtJ0Azi4Den7NJOSx0P -----END CERTIFICATE-----Generated at Fri Apr 4 23:54:24 2025 by rpki-client